CVE

CVE-2002-0967

Date: (C)2002-10-04   (M)2023-12-22

Buffer overflow in eDonkey 2000 35.16.60 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long "ed2k:" URL.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 7.5
Exploit Score: 10.0
Impact Score: 6.4
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL

Reference:

http://online.securityfocus.com/archive/1/275708

BID-4951

OSVDB-5042

edonkey2000-ed2k-filename-bo(9278)

http://www.edonkey2000.com/